This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/iNlyy6fzG-pZXJKLvpBU9XAYkVo.roa File: iNlyy6fzG-pZXJKLvpBU9XAYkVo.roa (raw, json) Hash identifier: S8q8QiAGEz7MV6+djxO4YwhYaC2j/vE52wvZ9iUEIgY= Subject key identifier: 88:D9:72:CB:A7:F3:1B:EA:59:5C:92:8B:BE:90:54:F5:70:18:91:5A Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019BEFB75E99F7A3D719EEE5C2B775F964D5 Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/iNlyy6fzG-pZXJKLvpBU9XAYkVo.roa Signing time: Sat 24 Jan 2026 11:15:30 +0000 ROA not before: Sat 24 Jan 2026 11:15:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205290 IP address blocks: 72.56.46.0/24 maxlen: 24 72.56.62.0/24 maxlen: 24 72.56.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ef:b7:5e:99:f7:a3:d7:19:ee:e5:c2:b7:75:f9:64:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Jan 24 11:15:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88d972cba7f31bea595c928bbe9054f57018915a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:41:ba:a2:4c:46:96:73:6f:67:06:95:be:fa: 92:05:fa:a1:78:1a:f7:2e:f4:36:6f:61:89:91:65: 52:42:3a:14:15:bb:f3:a6:da:18:3b:2b:c7:fc:93: 0e:ec:45:13:02:7a:0c:78:44:13:01:c2:07:1f:48: bc:22:23:a0:f6:03:c5:7b:d9:86:eb:63:bb:fd:9f: 44:6b:6d:01:60:bd:b4:12:46:7d:37:1a:63:20:4b: 59:e8:9e:ef:3a:4e:a1:29:e1:43:d5:82:98:1a:c1: ac:12:12:c7:6c:b1:9f:53:4c:15:56:4d:29:c3:3f: 55:51:41:20:20:31:55:c7:72:0e:a3:7a:26:bc:5b: b6:16:02:76:1f:aa:1f:02:94:b1:af:ef:29:ca:44: 35:c1:60:d4:9b:eb:20:87:6b:a4:10:c8:c6:82:35: 38:7f:a2:2b:6f:3f:19:39:6f:23:b5:1b:a3:2c:1e: b1:38:c7:d3:dc:46:8e:e5:0a:06:d0:26:d7:a9:2c: 38:5b:23:0b:c4:d5:b3:92:a0:06:4b:79:2a:12:4b: d4:80:a9:20:dd:04:0f:f2:e8:72:fc:0f:b3:9b:f2: 19:57:e4:50:c9:42:c9:ed:eb:a0:ca:64:d0:cc:13: 2d:04:6a:77:f1:b3:3a:af:33:54:f6:ce:b7:4c:a7: c1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D9:72:CB:A7:F3:1B:EA:59:5C:92:8B:BE:90:54:F5:70:18:91:5A X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/iNlyy6fzG-pZXJKLvpBU9XAYkVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.56.46.0/24 72.56.62.0/23 Signature Algorithm: sha256WithRSAEncryption 31:31:99:da:f8:e4:ab:fb:7a:39:3c:1d:32:fb:5b:93:98:a1: 93:3e:70:f7:8c:4d:b8:28:f2:83:7c:44:46:0a:e4:f5:18:56: a2:97:cd:8e:46:1c:f7:bd:88:9e:77:df:a0:5e:61:97:74:50: 14:4b:27:64:26:fc:70:fc:47:f9:fa:7e:62:a7:0b:6c:03:b7: e1:39:f3:97:12:3c:8e:be:5c:04:30:1e:ad:17:18:a0:ab:15: 9d:d8:8c:82:7b:f8:42:ff:86:32:51:fb:18:69:d3:02:86:69: 8d:6e:c7:86:81:be:04:6b:9e:2d:1e:97:59:f5:83:ef:8c:cc: e4:fc:d9:b4:67:a9:5d:21:ae:05:c5:1d:7d:a2:14:4c:83:66: 15:0a:03:85:1f:82:da:e9:58:eb:18:6d:28:63:3b:0d:88:78: 54:f6:b5:4d:c6:ce:e7:85:2e:78:3a:bb:77:0b:0c:68:dc:54: db:46:5d:8d:f3:2e:8f:14:3f:ba:d3:58:36:7a:12:b2:8a:7f: 00:6b:bc:7a:6f:6f:0c:35:e8:72:e4:d0:db:08:46:69:cb:e5: c5:00:8e:44:bf:1e:e1:28:1e:e7:1f:c2:58:ce:56:ad:35:10: 08:75:8e:b8:17:84:8d:0d:b9:42:50:5c:a1:3d:e2:8d:40:b5: 14:75:02:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvvt16Z96PXGe7lwrd1+WTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYwMTI0MTExNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGQ5NzJjYmE3ZjMxYmVhNTk1YzkyOGJiZTkwNTRmNTcwMTg5MTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEG6okxGlnNvZwaVvvqSBfqheBr3 LvQ2b2GJkWVSQjoUFbvzptoYOyvH/JMO7EUTAnoMeEQTAcIHH0i8IiOg9gPFe9mG 62O7/Z9Ea20BYL20EkZ9NxpjIEtZ6J7vOk6hKeFD1YKYGsGsEhLHbLGfU0wVVk0p wz9VUUEgIDFVx3IOo3omvFu2FgJ2H6ofApSxr+8pykQ1wWDUm+sgh2ukEMjGgjU4 f6Irbz8ZOW8jtRujLB6xOMfT3EaO5QoG0CbXqSw4WyMLxNWzkqAGS3kqEkvUgKkg 3QQP8uhy/A+zm/IZV+RQyULJ7eugymTQzBMtBGp38bM6rzNU9s63TKfBtwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIjZcsun8xvqWVySi76QVPVwGJFaMB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvaU5seXk2ZnpHLXBaWEpLTHZwQlU5WEFZa1ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQASDguAwQB SDg+MA0GCSqGSIb3DQEBCwUAA4IBAQAxMZna+OSr+3o5PB0y+1uTmKGTPnD3jE24 KPKDfERGCuT1GFail82ORhz3vYied9+gXmGXdFAUSydkJvxw/Ef5+n5ipwtsA7fh OfOXEjyOvlwEMB6tFxigqxWd2IyCe/hC/4YyUfsYadMChmmNbseGgb4Ea54tHpdZ 9YPvjMzk/Nm0Z6ldIa4FxR19ohRMg2YVCgOFH4La6VjrGG0oYzsNiHhU9rVNxs7n hS54Ort3Cwxo3FTbRl2N8y6PFD+601g2ehKyin8Aa7x6b28MNehy5NDbCEZpy+XF AI5Evx7hKB7nH8JYzlatNRAIdY64F4SNDblCUFyhPeKNQLUUdQKx -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:35 2026 by rpki-client